Local analysis · No account
Check the link.
Keep it closed.
Inspect a suspicious web address before acting on a message. See its actual hostname and the signals worth checking, without visiting the destination.
Your pasted address stays in this tab. No destination requests, no link history.
Address inspection
Actual hostname parsed by your browser
This is not a safety verdict. HTTPS and an ordinary-looking hostname do not prove a website is trustworthy. This tool checks address structure only.
No scheme was supplied: HTTPS was assumed for parsing only. No connection was made.
- Written protocol
- Port
- URL parameters
Verify through a route you already know
Open your usual app or trusted bookmark yourself. For an unexpected request, contact the organization through an independently known channel. Avoid signing in through the message.
Read the hostname, then check the request
In the fictional address https://accounts.example.com@signin.example.net/verify, the destination hostname is signin.example.net. The text before @ is not the destination. A familiar brand in a path or subdomain can also mislead you.
The checker highlights embedded sign-in information, HTTP, IP addresses, internationalized names, some shorteners, encoded authority characters, backslashes, non-default ports and local hostnames. These are clues to examine, not proof of fraud. A reference comparison helps you notice a different hostname; it is not an ownership check.
It does not inspect content, certificates, domain age, malware, reputation or redirects. Read how to check a link received by SMS or email for a practical decision process, and our fake IT support guide for requests made over the phone.
Link checker FAQ
Does this tool open the link?
No. It parses the text in your browser. It does not visit the destination, resolve DNS, expand redirects or contact a reputation service.
Does a result with no signals mean the link is safe?
No. A malicious or compromised website can have an ordinary-looking HTTPS address. The tool cannot assess page content, downloads, ownership or the sender’s intent.
Are pasted links saved or sent to analytics?
The checker does not store or transmit the pasted address or reference hostname. It does not put them in the page URL or analytics events. Use Clear to remove them from the page. Site analytics, if accepted, measure visits separately.
How does the reference hostname work?
Enter a hostname you already know independently, such as example.com. The checker compares the parsed hostname exactly or at a subdomain boundary. This does not prove ownership or safety, including for a matching subdomain.
Can it reveal the destination of a shortened link?
No. It recognizes a limited list of common shortening services, but does not follow redirects. Other shorteners and redirects may not be flagged.
Why does an internationalized name get a signal?
The browser represents some internationalized hostnames using xn-- labels. These are often legitimate. The signal invites careful comparison; it does not declare a domain malicious or detect every lookalike.
More free security tools
Password generator
Random passwords, passphrases or PINs, created by the Web Crypto API on your device.
Open toolPassphrase generator
Random words you can actually remember, with the entropy of a 16-character password.
Open toolWi-Fi password + QR code
A strong WPA2/WPA3 key and a QR code your guests scan to join, with a card to print.
Open toolStrength test
See your password the way an attacker does: patterns, entropy and four crack-time scenarios.
Open toolBreach checker
Find out if a password already leaked, without ever revealing it (k-anonymity).
Open toolPassword policy builder
NIST, PCI DSS and CIS presets with ready-to-run Windows, Active Directory and Linux scripts.
Open toolCrack-time table
How long every length and character mix survives a modern GPU cracking rig.
Open tool